[PATCH 7/9] OVAL signoff file_groupowner_etc_passwd

shawn at redhat.com shawn at redhat.com
Wed Sep 18 20:38:58 UTC 2013


From: Shawn Wells <shawn at redhat.com>

[user at redhat-thing-1 checks]$ ls -lL /etc/passwd
-rw-r--r--. 1 root root 1833 Sep 18 11:59 /etc/passwd
[user at redhat-thing-1 checks]$ ./testcheck.py file_groupowner_etc_passwd.xml
Evaluating with OVAL tempfile : /tmp/file_groupowner_etc_passwdr_kk_K.xml
Writing results to : /tmp/file_groupowner_etc_passwdr_kk_K.xml-results
Definition oval:scap-security-guide.testing:def:122: true
Evaluation done.
[user at redhat-thing-1 checks]$ sudo chgrp user /etc/passwd
[user at redhat-thing-1 checks]$ ls -lL /etc/passwd
-rw-r--r--. 1 root user 1833 Sep 18 11:59 /etc/passwd
[user at redhat-thing-1 checks]$ ./testcheck.py file_groupowner_etc_passwd.xml
Evaluating with OVAL tempfile : /tmp/file_groupowner_etc_passwd0G225W.xml
Writing results to : /tmp/file_groupowner_etc_passwd0G225W.xml-results
Definition oval:scap-security-guide.testing:def:122: false
Evaluation done.
---
 RHEL6/input/checks/file_groupowner_etc_passwd.xml |    4 ++--
 1 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/RHEL6/input/checks/file_groupowner_etc_passwd.xml b/RHEL6/input/checks/file_groupowner_etc_passwd.xml
index 5f79132..678d30a 100644
--- a/RHEL6/input/checks/file_groupowner_etc_passwd.xml
+++ b/RHEL6/input/checks/file_groupowner_etc_passwd.xml
@@ -7,6 +7,7 @@
       </affected>
       <description>The /etc/passwd file should be owned by the appropriate
       group.</description>
+      <reference source="swells" ref_id="20130918" ref_url="test_attestation" />
     </metadata>
     <criteria>
       <criterion test_ref="test_file_groupowner_etc_passwd" />
@@ -23,7 +24,6 @@
   </unix:file_state>
   <unix:file_object comment="/etc/passwd"
   id="object_file_groupowner_etc_passwd" version="1">
-    <unix:path>/etc</unix:path>
-    <unix:filename>passwd</unix:filename>
+    <unix:filepath>/etc/passwd</unix:filepath>
   </unix:file_object>
 </def-group>
-- 
1.7.1



More information about the scap-security-guide mailing list